Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666662303a3a2f34342d3434203d3e20323633333230.roa
File:                     323830343a313433633a666662303a3a2f34342d3434203d3e20323633333230.roa (raw, json)
Hash identifier:          J2BmRaixzZfqy24vW8SqoV9GXS7+3Xktl7VFmXuIzPU=
Subject key identifier:   1C:33:79:65:8C:C2:2A:CD:C7:CA:7E:90:18:1E:BD:D6:1F:44:80:66
Certificate issuer:       /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial:       623F676B83084F903497102573C8932B8026E696
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666662303a3a2f34342d3434203d3e20323633333230.roa
Signing time:             Mon 06 Jan 2025 18:44:01 +0000
ROA not before:           Mon 06 Jan 2025 18:39:01 +0000
ROA not after:            Mon 05 Jan 2026 18:44:01 +0000
asID:                     263320
IP address blocks:        2804:143c:ffb0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3f:67:6b:83:08:4f:90:34:97:10:25:73:c8:93:2b:80:26:e6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
        Validity
            Not Before: Jan  6 18:39:01 2025 GMT
            Not After : Jan  5 18:44:01 2026 GMT
        Subject: CN=1C3379658CC22ACDC7CA7E90181EBDD61F448066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2d:e4:4c:ce:17:21:9a:48:af:0e:bd:4d:40:
                    99:5e:d5:71:7c:c3:3f:b1:a1:81:3e:0d:c0:ba:89:
                    76:98:eb:8d:6d:05:76:d5:67:0d:f8:c1:e9:4c:dc:
                    16:0f:d8:46:ff:61:60:89:83:30:eb:fe:94:5c:a4:
                    d4:57:26:09:63:8b:5f:ae:50:c0:68:69:63:8e:64:
                    5e:bb:ba:03:98:83:c0:20:6b:e6:59:b0:cc:73:4f:
                    da:32:79:ea:85:75:c5:fd:3d:22:e7:a1:43:7c:61:
                    17:01:7a:73:82:9a:35:c5:a9:34:04:3d:82:8d:b9:
                    2c:b3:21:a6:3e:37:0e:65:e3:2f:05:dd:d4:2d:fa:
                    d9:1b:16:2d:6e:ca:7a:2f:59:c5:49:12:91:d7:9e:
                    2f:76:65:21:b3:bd:49:56:a2:1a:ca:c3:aa:5b:25:
                    82:44:5a:e4:03:92:2b:0c:01:19:bb:39:e9:bc:ae:
                    74:9b:51:4b:7c:39:34:23:40:63:f5:fe:b6:4d:8a:
                    4d:84:1e:50:bf:15:08:7f:f8:42:4c:47:18:c7:e6:
                    7b:7f:7f:03:d2:87:9c:3f:33:ac:15:02:91:50:20:
                    a7:b0:fa:f2:c6:15:e7:3a:6b:2b:95:ff:19:27:28:
                    fd:b6:1b:d4:99:13:ca:3c:e1:b8:02:7f:be:fe:a3:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:33:79:65:8C:C2:2A:CD:C7:CA:7E:90:18:1E:BD:D6:1F:44:80:66
            X509v3 Authority Key Identifier:
                keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666662303a3a2f34342d3434203d3e20323633333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:143c:ffb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         64:e2:a7:33:48:b1:c4:e2:5f:0e:76:8d:bf:94:b9:66:32:02:
         38:af:a8:d5:47:7a:8f:ce:e6:c0:9d:14:92:96:c4:2a:73:d0:
         4d:48:ca:48:b7:16:8f:d5:0b:ba:5e:c4:bb:bc:e9:58:a7:82:
         a4:12:c2:19:b8:bb:dd:cf:83:81:9d:44:c6:bb:9a:4d:84:46:
         ae:92:cb:36:82:1f:26:e5:c4:8f:07:ff:fd:c2:20:d4:e8:d6:
         34:98:66:ef:d6:b2:3f:12:b5:0d:f5:a6:46:d7:45:4e:45:76:
         7e:03:78:a9:f2:ac:f1:dc:96:fd:5a:02:4b:09:f7:4e:04:ec:
         f3:f3:81:2d:34:78:02:5d:45:a0:f1:9d:9e:fd:dc:73:60:13:
         f6:1a:f1:34:fb:7f:49:b1:a2:ce:e8:bc:66:86:bb:07:1d:50:
         b0:8b:1e:18:2d:af:2b:4a:cd:e3:22:e7:ed:4e:11:70:43:8d:
         47:ed:11:aa:b0:33:10:19:cf:74:ec:20:7f:28:2e:18:7a:41:
         b4:2e:47:0a:28:a2:58:c1:f6:78:74:ad:fc:47:7f:c6:25:1f:
         10:4c:56:fa:35:3a:a1:d6:9d:80:57:17:3f:ea:2e:7a:97:09:
         10:ef:35:c5:fc:00:b5:8b:ce:85:5a:8d:9d:f6:1f:c5:19:46:
         4e:85:66:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:49:24 2025 by rpki-client